Logical Methods in Computer Science 
Vol. 6 (4:9) 2010, pp. 1-25 
www.lmcs-online.org 



Submitted Feb. 23, 2010 
Published Dec. 21,2010 



THE COMPLEXITY OF LINEAR-TIME TEMPORAL LOGIC 
OVER THE CLASS OF ORDINALS* 

STEPHANE DEMRI a AND ALEXANDER RABINOVICH 6 

a LSV, ENS Cachan, CNRS, INRIA Saclay IdF, 61, av. Pdt. Wilson, 94235 Cachan Cedex, France 
e-mail address: demri@lsv.ens-cachan.fr 

b School of Computer Science, Tel Aviv University, Ramat Aviv, Tel Aviv 69978, Israel 
e-mail address: rabinoa@post.tau.ac.il 



Abstract. We consider the temporal logic with since and until modalities. This tempo- 
ral logic is expressively equivalent over the class of ordinals to first-order logic by Kamp's 
theorem. We show that it has a PSPACE-complete satisfiability problem over the class of 
ordinals. Among the consequences of our proof, we show that given the code of some count- 
able ordinal a and a formula, we can decide in PSPACE whether the formula has a model 
over a. In order to show these results, we introduce a class of simple ordinal automata, as 
expressive as Buchi ordinal automata. The PSPACE upper bound for the satisfiability prob- 
lem of the temporal logic is obtained through a reduction to the nonemptiness problem 
for the simple ordinal automata. 



Introduction 

The main models for time are (N, <}, the natural numbers as a model of discrete time and 
the structure (M, <}, the real line as the model for continuous time. These two models are 
called the canonical models of time. A major result concerning linear-time temporal logics 
is Kamp theorem KaniO.V GH R94] which says that LTL(U,S), the temporal logic having 
"Until" and "Since" as only modalities, is expressively complete for first-order monadic 
logic of order over the class of Dedekind-complete linear orders. The canonical models of 
time are indeed Dedekind-complete. Another important class of Dedekind-complete orders 
is the class of ordinals. 

In this paper, the satisfiability problem for the temporal logic with until and since modalities 
over the class of ordinals is investigated. This is the opportunity to generalize what is known 
about the logic over w-sequences. Our main results are the following. 
(1) The satisfiability problem for LTL(U,S) over the class of ordinals is PSPACE-complete. 
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(2) A formula <p in LTL(U, S) has some a-model for some ordinal a iff it has an /3-model for 
some P < cJ^ +2 where denotes the size of <f> for some reasonably succinct encoding 
(see forthcoming Corollary I3.3|) . 

In order to prove these results we use an automata-based approach [Biic62, VW94j. In Sec- 
tion [21 we introduce a new class of ordinal automata which we call simple ordinal automata. 
These automata are expressive equivalent to Biichi automata over countable ordinals [ BS73] . 
However, the locations and the transition relations of these automata have additional struc- 
tures as in [Roh97]. In particular, a location is a subset of a base set B. Herein, we provide 
a translation from formulae in LTL(U,S) into simple ordinal automata that allows to char- 
acterize the complexity of the satisfiability problem for LTL(U, S). However, the translation 
of the formula <fi into the automaton A& provides an automaton of exponential size in \<f>\ 
but the cardinal of the basis of is linear in \(f>\. 

Section [3] contains our main technical lemmas. We show there that every run in a simple 
ordinal automaton is equivalent to a short run. Consequently, we establish that a formula 
4> € LTL(U,S) has an a-model for some countable ordinal a iff it has a model of length 
trunc|^| +2 (a) where trunc|0| +2 (a) is a truncated part of a strictly less than (see 
the definition of truncation in Section [3j) . In Section [3] we present two algorithms to solve 
the nonemptiness problem for simple ordinal automata. The first one runs in (simple) 
exponential time and does not take advantage of the short run property. The second 
algorithm runs in polynomial space and the short run property plays the main role in its 
design and its correctness proof. 

In Section[5]we investigate several variants of the satisfiability problem and show that all 
of them are PSPACE-complete. Section [6] compares our results with related works. The satis- 
fiability problem for LTL(U, S) over w-models is PSPACE-complete |SC85] , Reynolds |Rey03[ 
ReylOb| proved that the satisfiability problem for LTL(U,S) over the reals is PSPACE- 



complete. The proofs in |Rey03[ ReylOb| are non trivial and difficult to grasp and it is 



therefore difficult to compare our proof technique with those of |Rey03[ ReylObj even though 



we believe cross-fertilization would be fruitful. We provide uniform proofs and we improve 
upper bounds for decision problems considered in |Cac06t IDN07} IRoh97] . see also [BLW07 . 
We also compare our results and techniques with Rohde's thesis [Roh97|. Finally we show 
how our results entail most of the results from |DN07j and we solve some open problems 
stated there. 



1. Linear-Time Temporal Logic with Until and Since 

1.1. Basic definitions on ordinals. Let us start smoothly by recalling basic definitions 
and properties about ordinals, see e.g. [Ros82] for additional material. An ordinal is a 
totally ordered set which is well ordered, i.e. all its non-empty subsets have a least element. 
Order-isomorphic ordinals are considered equal. They can be more conveniently defined 
inductively by: the empty set (written 0) is an ordinal, if a is an ordinal, then a U {a} 
(written a + 1) is an ordinal and, if A is a set of ordinals, then Uogx a ^ s an ordinal. 
The ordering is obtained by /3 < a iff j3 E a. An ordinal a is a successor ordinal iff 
there exists an ordinal (5 such that a = (3 + 1. An ordinal which is not or a successor 
ordinal, is a limit ordinal. The first limit ordinal is written uj. Addition, multiplication and 
exponentiation can be defined on ordinals inductively: a + = a, a + (/3 + 1) = (a + 0) + 1 
and a+fi = sup{a+~j : 7 < j3} where /3 is a limit ordinal. Multiplication and exponentiation 
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are defined similarly. Whenever a < /3, there is a unique ordinal 7 such that a + 7 = j3 and 
we write j3 — a to denote 7. 

1.2. Temporal logic. The formulae of LTL(U,S) are defined as follows: 

::= p J -10 [ 01 A 02 I 0lU02 I 0lS02 

where j? € PROP for some countably infinite set PROP of atomic propositions. Given a 
formula in LTL(U,S), we write sub(4>) to denote the set of subformulae of or their 
negation assuming that —i—np is identified with tp. The size of is defined as the cardinality 
of sub(<p) and therefore implicitly we encode formulae as DAGs, which is exponentially 
more succinct that the representation by trees. This feature will be helpful for defining 
translations that increase only polynomially the number of subformulae but for which the 
tree representation might suffer an exponential blow-up. We use the following standard 
abbreviations G0 = A ^(TU^0), G+0 = -n(TU^0), F0 = -G^0, F+0 = -G+^0, X0 =_L 
U0 and X _1 =_L S0 that do cause only a polynomial increase in size. 

An a-model a is a function a : a — > "P(PROP) for some ordinal a^O. The satisfaction 
relation "0 holds in the a-model a at position p" (/3 < a) is defined as follows: 

• <r,p ^p iff p G o{p), 

• a, P \= -i0 iff not a, P \= 0, 

• a, P \= 0i A 02 iff er, P \= 0i and a, P |= 02, 

• a, P \= 0iU02 iff there is 7 G a) such that cr, 7 |= 02 and for every 7' G (/3, 7), we have 

• cr, /3 (= 0iS02 iff there is 7 G [0,/3) such that a, 7 |= 02 and for every 7' G (7, P), we have 
cr,y |= 0i. 

Observe that S and U are strict "since" and "until" modalities. 

The (initial) satisfiability problem for LTL(U, S) consists in determining, given a formula 
0, whether there is a model a such that a,0 \= 0. Note that is satisfiable in a model a 
iff F0 is initially satisfiable in a. Therefore, there is a polynomial-time reduction from the 
satisfiability problem to the initial satisfiability problem. From now on, we will deal only 
with the initial satisfiability problem and for the sake of brevity we will call it "satisfiability 
problem" . 

We recall that well orders are particular cases of Dedekind complete linear orders. 
Indeed, a chain is Dedekind complete iff every non-empty bounded subset has a least upper 
bound. Kamp's theorem applies herein. 

Theorem 1.1. [Kam 68] LTL(U,S) over the class of ordinals is as expressive as the first- 
order logic. 

Moreover, satisfiability for LTL(U, S) is known to be decidable and as stated below we 
can restrict ourselves to countable models. 

Theorem 1.2. 

(I): [BS73] The satisfiability problem for LTL(U , S) over the class of countable ordinals 
is decidable. 

(II): (see e.g. [GS85[ Lemma 6]) A formula in LTL(U,S) is satisfiable iff it is satisfiable 
in a model of length some countable ordinal. 
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Observe that in [BS73] it was proved that monadic second-order logic over the class of 
countable ordinals is decidable and in [GS85j it was shown that if a formula of the first-order 
monadic logic is satisfiable in a model over an ordinal then it is satisfiable in a model over 
a countable ordinal. (I) and (II) are immediate consequences of these results and the fact 
that LTL(U,S) can be easily translated into first-order logic. 

Consequently, LTL(U,S) over the class of ordinals is certainly a fundamental logic to 
be studied. We recall below a central complexity result that we will extend to all ordinals. 

Theorem 1.3. [SC85J Satisfiability for LTL(U,S), restricted to u -models, is pspace- com- 
plete. 

2. Translation from formulae to simple ordinal automata 

In Section f2 .11 we introduce a new class of ordinal automata which we call simple ordinal au- 
tomata. These automata are expressive equivalent to Biichi automata over ordinals [BS73| . 
However, the locations and the transition relations of these automata have additional struc- 
tures. In Section[231 we provide a translation from LTL(U, S) into simple ordinal automata 
which assigns to every formula in LTL(U,S) an automaton that recognizes exactly its mod- 
els. We borrow the automata-based approach for temporal logics from [VW941 iKVW OOj . 

2.1. Simple ordinal automata. 

Definition 2.1. A simple ordinal automaton A is a structure (B,Q,8 nex t,Sn m ) such that 

• B is a finite set (the basis of A) , 

• Q QV(B) (the set of locations), 

• o~next Q Q x Q is the next-step transition relation, 

• him Q 'P(B) x Q is the limit transition relation. 

A can be viewed as a finite directed graph whose set of nodes is structured. Limit 
transitions, whose interpretation is given below, allow reaching a node after an infinite 
amount of steps. Given a simple ordinal automaton A, an a-path (or simply a path) is a 
map r : a —> Q for some a > such that 

• for every (3 + 1< a, (r(/3),r(/3 + 1)) G 5 next , 

• for every limit ordinal (3 < a, (Bn m (r, (3),r((3)) G Su m where 

Bumiji (3) = {« £ B : 3 7 < (3 such that for every 7' G (7, (3), a G r{^')}. 

The set Bn m (r,(3) contains exactly the elements of the basis that belong to every location 
from some 7 < (3 until f3. We sometimes write Bn m (r) instead of Bn m (r,a) when a is a 
limit ordinal. 

Given an a-path r, for (3,(3' < a we write 

• r>p to denote the restriction of r to positions greater or equal to (3, 

• r<p to denote the restriction of r to positions less or equal to (3, 

• r [/3,P') to denote the restriction of r to positions in [(3,(3') (half-open interval). 
A simple ordinal automaton with acceptance conditions is a structure of the form 

(B, Q, I, F, T , 5 nex t,5ii m ) 

where 
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• I Q Q is the set of initial locations, 

• F Q Q is the set of final locations for accepting runs whose length is some successor 
ordinal, 

• J- C V(B) encodes the accepting condition for runs whose length is some limit ordinal. 
Given a simple ordinal automaton with acceptance conditions, an accepting run is a path 
r : a — > Q such that 

• r(0) G I, 

• if a is a successor ordinal, then r(a — 1) G F, otherwise Bn m (r) G T . 

The nonemptiness problem for simple ordinal automata consists in checking whether A has 
an accepting run. Our current definition for simple ordinal automata does not make them 
language acceptors since they have no alphabet. It is possible to add in the definition a 
finite alphabet £ and to define the next-step transition relation as a subset of Q x £ x Q, 
see an example on the right-hand side of Figure [TJ Additionally, the current definition can 
be viewed as the case either when the alphabet is a singleton or when the read letter is 
encoded in the locations through the dedicated elements of the basis. This second reading 
will be in fact used implicitly in the sequel. We also write A to denote either a simple 
ordinal automaton or its extension with acceptance conditions. 

2.2. Relationships with Biichi automata. Simple ordinal automata with acceptance 
conditions and alphabet define the same class of languages as standard ordinal automata in 
the sense of |Biic64j. [Biic65] . Main arguments are provided below for the sake of complete- 
ness. However, we do not need this correspondence in our forthcoming developments. The 
main interest for our model of simple ordinal automata rests on the fact that it allows us 
to obtain the promised pspace upper bound. A standard ordinal automaton is a structure 
A = (£, Q, I, F, F, 5 next , Sum) such that 

• £ is a finite alphabet, 

• Q is a finite set of locations, 

• Snext Q Q x £ x Q and 5 Urn C V(Q) x Q, 

• 7,FCQandJCP(Q). 

A word u : a — > S is accepted by A iff there is r : a — > Q such that 

• for every /3 + 1 < a, (r(fi),u(J3),r(fi + 1)) G 5 next , 

• for every limit ordinal /3 < a, (inf (r, /?), r(/3)) G 6u m where 

inf(r, (3) = {qeQ: for all 7 < /3 there is 7' G (a, 0) such that r(j') = q}. 

As usual, inf (r, (3) denotes the set of locations that appear cofinally before j3. 

• r(0) G I and if a is a successor ordinal, then r(a — 1) G F, otherwise inf(r, a) G T . 

We write L(^4) to denote the set of words accepted by A. Similar definitions can be given 
for simple ordinal automata with acceptance conditions and alphabet. 

Lemma 2.2. 

(I): Given a simple ordinal automaton A, there is a standard ordinal automaton A' such 
that L(A) = L(A'). 

(II): Given a standard ordinal automaton A, there is a simple ordinal automaton A' such 
that L{A) = L(A'). 




Proof. (I) Let A be a simple ordinal automaton A = {T,, B,Q, I, F, F, 5 nex t, 5ii m ). We 
consider the standard ordinal automaton A' of the form (T,,Q,I,F, F, S nex t,d' lim ) such that 
(Y, q) G 5[ im iff there is a limit transition (Z, q) G fe m satisfying the conditions below. 

• for every q' G Y, we have Z C. q', 

• for every element o € (B \ Z), there is g' G Y such that a G" g'. 

One can easily check that L(.4) = h(A'). Observe that A' can be exponentially larger than 
A. 

(II) Let A = (£, Q, I, F, F, S n ext,o~iim) be a standard ordinal automaton. We build a simple 
ordinal automaton A' = (S, -B', Q', I', F', F' , (5^^, <5 z ' im ) as follows. 

• B' = V(Q). 

. Q' = {X e V(B') : 3 q £ Q, X = {Y £ V(Q) : q G Y}}. Below, when g G Q, by 
abusing notation, we also write q to denote the corresponding location in Q' equal to 
{Y G V(Q) : q G Y}. 

• I> = I,F' = F and J 7 ' = J 7 . 

• For a G S and q,q' G Q, (q,a,q') G <^ e!ri only if (q,a,q') G <5 nex f. 

• For Y' C B' and q £ Q, (Y 1 , q) G <% m only if there is a limit transition (Y, q) G <^ m such 
that Y' = {a G 5' : Y C a}. 

Again, one can easily check that ~L(A) = L(«4'). □ 

Let Lo be the set of words u : a — > {0, 1} such that for (3 < a, (3 = w 2 7 for some ordinal 
7 iff u(/3) = 1. The left-hand side of Figure [T] presents a standard ordinal automaton 
(with three locations) accepting Lo- Next-step transitions are represented by plain arrows 
whereas limit transitions are represented by dashed arrows. Moreover, F = {qi,q U ),q> LU 2} 
and F = V({qi,q u , q>^}). The right-hand side of Figure [T] presents a corresponding simple 
ordinal automaton along the lines of the proof of Lemma 12.21 Its basis B is equal to 
V{{qx,q u ,q>ufl}) and we write qi to denote {{gi}, {qi, q u }, {qi, q>rf}, {li, <lu, 9>a; 2 }}- ^ 
and q> a; 2 are defined similarly. 

2.3. Translation from LTL(U,S) formulae to simple ordinal automata. As usual, a 
set Y is a maximally Boolean consistent subset of sub{4>) when the following conditions are 
satisfied: 

• for every ijj G sub(cp), -iij) G Y iff ifi G" Y, 

• for every ipi A ij)2 G sub(cfi), ip\ A tp2 € Y iff , V>2 G Y. 

Given a formula </>, the simple ordinal automaton A^ = (B, Q, I, F, F, 5 nex t, Sum) is defined 
as follows: 

• B = sub{(p). 

• Q is the set of maximally Boolean consistent subsets of sub{(p). 

• I is the set of locations that contain (j> and no elements of the form ipiSip2- 
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• F is the set of locations with no elements of the form ip\[}ip2. 

• A subset Y of B is in T if there are no ip\ and ip2 such that {ipi, ^ip2, ^lU^} Q Y. 

• For all q, q' G Q, (q, q') G <5 n ea;t ^ the conditions below are satisfied: 

(nextu): for every ipi\Jip2 G sub((p), Ipi0ip2 G </ iff either ip2 £ or ipi,ipiUip2 G </, 
(nexts): for every ip±Sip2 G sub(<p), ip\Sipi G iff either ^2 G (/ or ipi,ipxSip2 G g. 

• For all Y C and q £ Q, (Y,q) G 44> the conditions below are satisfied: 
(limul): if tpx, -^2,^1^2 G Y, then either ^2 G g or ipx,ipx^ip2 G g, 
(limu2): if ipx,ipxVip2 G g and -01 G Y, then ipxUip2 G Y, 

(lim(j3): if ipi £ Y , ip2 £ q and ipxVip2 is m the basis -B, then ^>iU?/>2 G Y, 
(limg): for every ipxSip2 G sub(cp), ipxSip2 G q iff (V>1 G Y and ipxSip2 G Y). 
Even though the conditions above are compatible with the intuition that a location 
contains the formulae that are promised to be satisfied, at the current stage it might sound 
mysterious how the conditions have been made up (mainly for the conditions related to 
limit transitions). For some of them, their justification comes with the proof of Lemma l2,31 
Let a be an a-model and be a formula in LTL(U,S). The Hintikka sequence for a 
and <p is an a-sequence H u ^ defined as follows: for every j3 < a, 

H^(P)^{i>esub((f>) : a,f3\=iP}. 
Given a run r : a — > Q, we write mod(r) : a — > 'P(PROP) to denote the a-model a defined 

as follows: cr(/3) = {p G PROP : p G r(/3)}. It is clear that if r is an Hintikka sequence for 
a and (j>, then mod(r) = a. 

Now we can state the correctness lemma. 

Lemma 2.3. 

(I): If<T,0 \= <p, then the Hintikka sequence for a and <p is an accepting run of Ad,- 
(II): If r is an accepting run of Ad,, then mod(r),0 \= <p and r is the Hintikka sequence 

for mod(r) and (p. 
(Ill): <p is satisfiable iff Ad, has an accepting run. 

Proof. First, (III) is an immediate consequence of (I) and (II). 

(I): Suppose that there is a model a : a — > 'P(PROP) (with a > 0) such that a,0 \= <fi. 
By using LTL(U,S) semantics, it is straightforward to check that H a ^ is accepted 
by Ai,. 

(II): Let r : a — > Q be an accepting run of Ad,. Let us show by structural induction that 
for all ip G sub{4>) and /3 < a, we have mod(r),f3 \= ip iff ip G r(/3). The base case and 
the cases with Boolean operators in the induction step are by an easy verification. 
The only interesting cases in the induction step are related to the temporal operators 
U and S. Below, let a be mod(r). 

Case U: ip = ipx(iip2- 

Let us reason ad absurdum. Suppose that {/3 : ip G r(f3)} 7^ {/3 : a, /3 (= ip}. Let 
f3 be the smallest ordinal which belongs to only one of these sets. We consider two 
cases: (a, f3 \=ip and ip r(/3)) - Case I below - or (ip G r(0) and a, j3 ft= ip) - Case 
II below. 

Case I: Let 7 be the smallest ordinal verifying f3 < 7 < a, a, 7 |= ip2 and for every 
7' G (j3, 7), we have a,^' \= ip\ A->ip2- By induction hypothesis, ip2 G r(*y) and for 
every 7' G (P,j), {ipx,^} Q r(j'). 
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First, we are going to show that -iip G r^') for every 7' G This is true for 

/3. Assume that this is true for j3' then it is true for /3' + 1 by condition (nextu). 
Assume that 7' is a limit ordinal and ip G" for every f3' G [/?,7')- Then, by 
condition (limy 2) we obtain that -iip G r (l')- Next, consider two cases: 
Case a): 7 is a successor, say 7 = f}' + 1. We have -iip G ?"(/?') and ^2 G ^(7). 
This contradicts condition (nextu). 

Case b): 7 is a limit ordinal. In this case {~>ip,il>i} C Bn m (r, 7) and ^2 G r (7)- 
This contradicts condition (lini(j3). 

Case II: Now suppose that Y>iUY>2 ^ ^(/?) and cr, /? ^ ^iU^- 

Case a): For every 7 such that 7 G (/3,a), we have cr, 7 ^= ^2 (^2 does not hold 
on a strictly after /?). 

By induction hypothesis, for every 7 G (f3,a), ~<ip2 £ r (7)- Let us show that for 
every 7 G (/?,a), {^1,^1^2} C ^(7). 

Base case: 7 = f3 + 1. 

By condition (nextu), ^iU^2 G ?"(/?) and -1^2 G r (/5 + 1) imply {^1,^1 U^} ^ 
r(/3 + l). 

Induction step: 

• if 7 = 7' + 1, then by condition (nextu), Y>iUY>2 € ^(7') and -*ip2 G r (7' + 1) 
imply {^1,^1 U^} C r(7' + 1). 

• if 7 is a limit ordinal, by induction hypothesis, {ipi, ^tp2, Y'lUY^} ^ Bu m (r, 7). 
By condition (limyl), {V'l, V'lU^} C r(7) since ^2 ^ J" (7). 

Consequently, if a is a limit ordinal, then {V'l, _, V'2 ) V'lU^} ^ Bi irn (r,a) which 
is in contradiction with the definition of J- in .A^. Similarly, if a = a' + 1, then 
V'iU^2 £ r(a') which is in contradiction with the definition of F. 

Case b): There is a minimal ordinal 7 G (/?, a) such that cr, 7 |= -1^1 A -1^2 
and for every 7' G (/?, 7), we have £1,7' |= Vi A — 1-02- By induction hypothesis, 
{-'tpi, ^2} Q ^(7) and for every 7' G (/3, 7), -^2} Q r il')- Let us show that 
for every 7' G (/9,7), {Y>i,^iU^ 2 } C r(7'). 

Sase case: 7' = j3 + 1. 

By condition (nextu), ^iU^2 £ and -1^2 £ r (/5 + 1) imply 11^2 } C 

r( 7 '). 

Induction step: 

• If 7' = 7" + 1, then by condition (nexty), Y^U^ € ^(7") and -1^2 G r (7" + 1) 
imply {V'^V'iU^} Q r(Y + 1). 

• If 7' is a limit ordinal, then by induction hypothesis, {ipi, ^ip2, Y'lUY^} ^ 
Bh m (r,-f'). By condition (limul), {Y>i, V'lU^} C r^') since ip 2 & r{^'). 

Consequently, if 7 is a limit ordinal, then {tpi, -I Y>2 ) "01 U^} ^ Bu m (r,^) which 
leads to a contradiction by condition (limul). Indeed, by induction hypothesis, 
{-'tpi, ^2} Q r (l)- Similarly, if 7 = 7' + 1, then ipi\Jip2 which leads to a 
contradiction by condition (nextu). 

Case S: ip = ^iSi/>2- 

Let us reason ad absurdum. Suppose that {/3 : ^ G ?"(/3)} 7^ {/3 : cr, /3 |= ^}. Let /3 
be the smallest ordinal that belongs to only one of these sets. Again, we distinguish 
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two cases, namely either (a,ft\=ip and ip G" r(/3)) - Case I below - or (ip G r(ft) and 
a, ft y= V) ~ Case II below. 

Case I: So ft > and there is 7 € [0, /3) such that a, 7 |= ^2 and for every 7' € (7, /3), 
we have £1,7' |= tp±. By induction hypothesis, tp2 £ ^(7) and for every 7' G (7,/?), 
V"i G r(7'). Observe that for every 7' G (7, we have (7,7' |= ^ and tp G r (7') 
(/3 is minimal). 

• If /3 = + 1 then by condition (nexts) ip2 r(ft') and {^1, ^lS^} 2 

If 7 = ft', then this leads to a contradiction since 1P2 £ r {l)- Similarly, if 
7 < ft', then ^ since Vi € r(/3'). Since <r, /3' |= ipiSip2, this leads to a 

contradiction by the minimality of (3. 

• If ft is a limit ordinal, then by condition (lims) either ^1 Bn m (r, (3) or V'lS^ ^ 
Biim( r ,P)- By induction hypothesis, ^1 G Bi im (r,ft). Hence, there is f3' G (7,/?) 
such that ^>iS^2 K/^')> which is in contradiction with the minimality of /3. 

Case II: 

Cose a): For every 7 G [0,/3), <r, /3 ^ ^>2- 

By induction hypothesis, for every 7 G [0,(3), tp2 r (l)- Moreover, for every 
7 G [0, f3), we have a, f3 Y= ipiSip2- 

• If ft = (3' + 1 then by condition (nexts), {V'l; ^lS^} ^ r (/3') which leads to a 
contradiction by minimality of j3. 

• If (3 is a limit ordinal, then {?/>i, V'lS^} ^ Bu m (r, j3) by condition (lims). Hence, 
for some f3' < (3, ip\Stp2 € r {ft'), which leads again to a contradiction by the 
minimality of f3. 

• If (3 = 0, then we also have a contradiction since r(0) does not contain any since 
formulae. Observe that in the previous case analyses with ordinals, the case "0" 
has been irrelevant. 

Case b): a,ft \/= ip and not a). 

Remember that ip £ r {ft)- There is j3' < /3 such that a, ft' \/= ipi. Otherwise, by 

induction hypothesis and by not a), we have a, ft \= ip, a contradiction. 

Case b.l: There is a maximal position 7 < ft such that a, 7 \/= ip\. 

For every 7' G ('J, ft), we have a, 7 \/= ip2, otherwise a, ft \= ip which would lead to 

a contradiction. Let us show by transfinite induction that for every 7' G ('J, ft], 

ip(£r{i). 

Base case: 7' = 7 + 1. 

~'ipi,^ip2 G f{l) imply by condition (nexts) that ip G" r{^'). 
Induction step: 

• If 7' = 7" + 1, then -'V'2, _, V' G r(j") by induction hypothesis. By condition 
(nexts) ip r(Y)- 

• If 7' is a limit ordinal, then -1^ G Bu m (r,j') and by condition (lims), V' r (7')- 
Hence, ip r(/3), which leads to a contradiction. 

Case b.2 There is no maximal position 7 < ft such that a, 7 \£ -0i (the most 
delicate case). 

Consequently, there is a unique position 7 < ft such that for every 7' < 7, there 
is 7' < 7" < 7 verifying -1^1 G r (l")- This means that 

• for every 7' G [7,/?], ^T G r (7')> 

• ipi £ Bi im (r,i) and, 
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• by condition (lims) ip 

Moreover, for every 7' G ~^ip2 £ r (l') otherwise by induction hypothesis, 

a, (3 \= -ip, which would lead to a contradiction. Let us show by transfinite induction 
that for every 7' G (7, /S], ^ ^ r ("f')- 
Base case: 7' = 7 + 1. 

—■-0, —1-02 £ ^(7) imply by condition (nexts) ^ r (7')- 
Induction step: 

• If 7' = 7" + 1, then -■V'2 ; _, V' ^ '"(V) by induction hypothesis. By condition 
(nextg) ip g" r(V). 

• If 7' is a limit ordinal, then G Bn m (r, 7') and by condition (lims), V' ^ r (7')- 
Hence, ip g" r(/3), which leads to a contradiction. □ 

3. Short Run Properties 

In this section, we establish pumping arguments that are useful to show that 

• in order to check the satisfiability status of the formula (j), there is no need to consider 
models of length greater than oj^ +2 , 

• simple ordinal automata cannot distinguish ordinals with identical tails (defined below 
precisely with the notion of truncation). 

Let A be a simple ordinal automaton and Y be a subset of its basis. Y is said to be 
present in A iff either there is a limit transition of the form (Y, q) in A or Y G T . Given a set 
Y present in A, its weight, noted weight (Y), is the maximal I such that Y\ C I2 C • • • C Yj 
is a sequence of present subsets in A and Y\ = Y (c denotes proper subset inclusion). 
Obviously, weight (Y) < card(B) + 1. 

Given a path r : a — > Q in A with a limit ordinal a > u, its weight, noted weight (r), is 
the maximal value in the set 

{ weight (B hm (r,(3)) : (3 < a, (3 is a limit ordinal} U {weight (B Hm (r))} 

When a is a successor ordinal, the maximal value is computed only from the first set of 
the above union. By convention, if a path has no limit transition, then its weight is zero 
(equivalently, its length is strictly less than u + 1). Furthermore, we write all(r) to denote 
the set 

aJl(r) d = f □ m 

/3<a 

that corresponds to the set of elements from the basis that are present in all locations of 
the run r. Let r, r' be two paths of respective length a and a'. We say that r and r' are 
congruent, written r ~ r', iff the conditions below are meet: 

(1) r(0) = r'(0). 

(2) Either both a and a' are successor ordinals and r(a — 1) = r'(ct — 1) or both a and a' 
are limit ordinals and Bu m (r) = Bu m {r'). 

(3) aJl(r) = aU(r'). 

Let 77 be a path of length a and r2 be a path of length f3 such that if a is a limit 
ordinal then (Bn m (ri), r2(0)) G otherwise 77 (a — 1) = ^(O). The concatenation 77 • r2 
is the path r of length a + (3 such that for 7 G [0, a), r(-y) = 77(7) and for 7 G [0, /3), 
r(a + 7) = 7*2(7). F° r every ordinal a, the concatenation of a-sequences of paths is defined 



COMPLEXITY OF LTL OVER ORDINALS 



11 



similarly. The relation ~ is a congruence for the concatenation operation on paths as stated 
in details below. 

Lemma 3.1. 

(I): Let r ■ ro ■ r' and r\ be two paths such that ro ~ r\. Then, r ■ r\ ■ r' is a path that is 
congruent to r ■ r$ ■ r' . 

(II): Let ?q, ro, ro, . . . and r\,r\,r\, . . . be two uj-sequences of pairwise consecutive paths 
such that for i > 0, Tq ~ r\ and their length is a successor ordinal. Lf r ■ (tq • 7g • r 2 • 
. . .) • r' is a path, then it is congruent to r ■ (r° • r\ • rf •■■■)• r'. 

The proof of the above lemma is by an easy verification but observe that for the proof 
of (II) the third set of equalities from the definition of the congruence ~ ensures that 
r ' ( r o ' r o ' r o '•••)' r> i s a path. 

Lemma 3.2. Let r : a — > Q be a path in A for some countable ordinal a such that if a 
is a limit ordinal, then Bu m {r) is present in A. Then, there is a path r' : a' — > Q for 
a , < w max(l,wdght(r))+l such that r „ r > and we ight(r') < weight (r). 

Proof. The proof is by induction on the weight of the paths. When the weight of the path 
is zero, r' = r already satisfies the condition r ~ r'. We only treat below the cases with 
paths of length some limit ordinals. The case with paths of length some successor ordinals 
is similar. All the runs r 1 built below satisfy that weight (r') < weight (r) for the following 
reasons. Indeed, no additional limit transitions are applied when building r' from r and 
when r is of length some limit ordinal, Bn m (r) = Bn m (r'). Hence, below we shall not 
further emphasize weight (r') < weight (r). 

Base case 1: weight (r) = 1 and a = uj 2 . 
There is n > such that 

(1) for every a £ B \ all(r), there is 7 < u ■ n such that a ^(7), 

(2) all(r> u . n ) = B Hm (r). 

The first condition states that if a does not belong to all(r), then this is already witnessed 
by r< w . n . Furthermore, in general all(r> w .&) C Bu m (r) but the second condition above 
states that for n large enough, we can obtain Bu m (r) C alKry^.n). 

Hence, all(r< w . n ) = all(r) and Bu m (r> U} .(n+i)) = Bu m (r). Besides, B Um (r) is present in 
A. Let Yi = Bn m (r<u.i) for i > n + 1. By construction of n, for alH > n + 1, Bu m (r) C Kj. 
Moreover, weight (Bn m (r)) = 1. Hence, for all i > n + 1, Y\ = Bi im {r). Consequently, 
r' : u ■ (n + 1) — > Q with r'(/3) = r{f3) for fj < oj ■ (n + 1) verifies r ~ r' . In order to show that 
all(r) = all(r') it is sufficient to observe that all(r) C all(r') since r 1 contains less locations 
than r and all(r' <UJ , n ) = all(r). 

Base case 2: weight (r) = 1 and a = uj 2 x /3. 

The proof is by transfinite induction. The base case with (5 = 1 is actually the above base 
case 1. Now suppose that a = uj 2 x (/5 + 1). By induction hypothesis and by the base case 
1, there are paths r' : 7 —¥ Q and r" : 7' — > Q such that r' ~ r <i0 2 x p, r" ~ r >LU 2 x/3 and 
7 + 7' < oj 2 . Consequently, the concatenation of r 1 and r" provides a path satisfying the 
adequate conditions. 

Now suppose that a = uj 2 x f3 where j3 is a limit ordinal. Since a is countable, there is 
an increasing sequence (/%)ieN of ordinals strictly smaller than [3 such that (3q = and j3 = 
lira (see e.g. |Ros82l Theorem 3.36]). Observe that for every i, — A < f5. Hence, for 
every i, by induction hypothesis, there is a path r[ : % — > Q such that ~ ?"[ w 2 xft,tJ 2 x/3 i+ i) 
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and 7j < u 2 . Consequently, r' ■ r[ ■ r' 2 ■ ■ • is a path of length at most uj 2 congruent to r by 
Lemma 13. II (the length may be exactly u 2 ). By using again arguments from the base case 
1, we obtain a path that satisfies the adequate conditions. 

Base case 3: weight (r) = 1 and a = uj 2 x j3 + oj x n (n G N). 

The existence of a path satisfying the adequate conditions is an immediate consequence of 
the base case 2. 

Induction case. 

Case 1: a = w wei s ht ( r )+ 1 . 

There is n > such that 

(1) for every a G B\ all(r), there is 7 < u weight ^ ■ n such that a g" ^(7), 

(2) all(r> w w Ci ght(r). n ) = B Um (r). 

Hence, all(r< wWC i g h t (r). n ) = all(r) and Bu m (r^weigw (r). (ri+1 )) = B Um {r). Besides, B lirn (r) is 
present in A and weight (Bu m (r)) < weight(r). If there is a limit ordinal /3 G [o; wei s ht ( r ) -n, a) 
such that -B;i m (? , <i g) = Bn m (r), then r' : /3 — > Q with ^(7) = r{^) for 7 < [3 verifies the 
required conditions. Otherwise, suppose that for every limit ordinal /3 G [w wei s ht W-n,a), we 
have Bu m {r < p) ^ Bu m (r). By construction of n, for every limit ordinal in [(^ wei s ht ( r ) -n, a), 
Bumir) c Bu m (r < p). By induction hypothesis, for every i > n, there is a path r\ : 7$ — >• Q 
such that ^[ w wcigM(r) xi w woight(r) x( -j +1 )) ~ and 7« < o; wei s ht(r ). Consequently, r' ■ r[ ■ r' 2 ■ ■ ■ is 
a path of length less than u; weight ( r ) that is congruent to r by Lemma 13. 11 
Case 2: a = uj weight ^ +1 x f3. 

The proof is by transfinite induction as in the base case 2. Indeed, suppose that a = 
^weightM+i x + There are paths r' : 7 -)• Q and r" : 7' -> Q such that r' ~ 
r <w woi g ht(r)+i X( g, r" ~ r >w wci g ht(r)+i x/3 and 7 + 7' < a; wcl s ht (' r )+ 1 . Consequently, the concate- 
nation of r' and r" provides a path satisfying the adequate conditions. 

Now suppose that a = c J j wei s h - t ( r )+ 1 x /3 where f3 is a limit ordinal. Hence, there is 
an increasing sequence (ft)igN of ordinals strictly smaller than such that f3o = and 
/3 = Zzm /3j (see e.g. [Ros82, Theorem 3.36]). Observe that for every i, fy+i — < (3. 
Hence, for every i, by induction hypothesis, there is a path r[ : 7, — > Q such that r. ~ 
^[a;weightCr)+i X( g j!a) weight(r)+i X( g \ and 7j + 1 < w wei s ht ( r )+ 1 . Consequently, r' ■ r[ ■ r' 2 ■ ■ ■ is a 
path of length less than u; wei g ht ( r )+ 1 congruent to r by Lemma [3. II (the lenght may be equal 

tO o;Weight(r)+l)_ By 

using the case 1 in the induction step, we can get a path that satisfies 
the adequate conditions. 

Case 3: a = u;weiglit(r)+l x f3 + w wci § ht M x n weight(r) + • • • + co 1 x m with n weight(r) , 
ni G N. 

The existence of a path satisfying the required conditions is an immediate consequence of 
the case 2. □ 

Lemma 13.21 below states a crucial property for most of complexity results established 
in the sequel. Indeed, for usual ordinal automata, it is not possible to get this polynomial 
bound as an exponent of uj for the length of the short paths. Actually, the exponent is 
linear in the cardinal of its basis and can be logarithmic in the number of locations for 
large automata. By combination of Lemma 12.31 and Lemma 13.21 we obtain the following 
interesting result. 

Corollary 3.3. If 4> is satisfiable, then (f> has an a-model with a < uj^ +2 . 
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For n £ N, let trunc n be the function that assigns to every ordinal a > an ordinal 
in (0,w n 2) as follows, a can be written in the form a = w n 7 + /3 with f3 € [0,u> n ). Then 
trunc n (a) = uj n x mm(7, 1) + /3. For instance trunc2(w 3 ) = uj 2 , trunc2(u> 2 + oj) = uj 2 + uj 

and trunc2(u; 2 x 2) = uj 2 . The ordinals a, /3 are n-equivalent, written a « n /3, 44> 
trunc n (a) = trunc n (/3). 

Lemma 3.4. Let A be a simple ordinal automaton. 

(I): If r is a path of length w wei g ht ( r )+ 1 x a for some countable ordinal a > 0, then there 

is a path r' of length o; weight ( r ) +1 such that r ~ r' and weight(r') < weight(r). 
(II): // a path r has length u; weight ( r ) +1 and weight (r) > 1, then for every ordinal a > 0, 
there is apathr' of length uj weight ^ +1 x a such thatr ~ r' and weight (r f ) < weight(r). 
(Ill): If r is a path of length some countable ordinal a and /3 ~ C ard(s)+2 a > then there is a 
path r' of length /3 such that r ~ r'. 

Only in (I), the ordinal a is supposed to be countable. 

Proof. (Ill) is a direct consequence of (I) and (II). Indeed, suppose a = w card ( B )+ 2 7 + ji 
and P = u caTd ^ +2 y + t£ with 71 = j[ £ [0, a; card ( B )+ 2 ), and 70 > 1 iff 7 > 1. If 
7o = 7o = 0) then a = f3 and we are done. Otherwise (weight (r) > 1), let K > such that 
if + weight(r) = card(S) + 2. Since weight(r) < card(i?) + 1 such a value K exists and 
therefore (I) can be applied. There is a run r' such that r' ~ r <wCar d(s)+2 70 and r' is of length 
w weight(r)+i j£ we ight(y) ^ weight(r), then we apply again (I) on r' in order to obtain 

a run r" such that r" ~ r', r" is of length u; weight ( r If again weight(r") ^ weight(r'), 
we cannot repeat this process more than card(5) + 1 times. Eventually, we obtain a run ro 
such that ro ~ r <wC ard(s)+2 7o and ro is of length w weight(ro)+i_ gy (jj^ there is a run r\ such 

that ri ~ ro and r\ is of length cj card (- B ) +2 7 by (II). Consequently, r\ ■ r >u)C 
and ri • r> wC ard(s)+2 7o is of length /3. 

(I): The proof is by transfinite induction on a. Again, all the runs r' built below sat- 
isfy that weight (r') < weight (r) for the following reasons. Indeed, no additional 
limit transitions are applied when building r' from r and when r is of length some 
limit ordinal, Bu m {r) = Bu m (r'). Hence, below we shall not further emphasize 
weight(r') < weight(r). We behave similarly for the proof of (II). 
Observe that the run r cannot be of length uj. In the sequel, we assume that 
weight (r) > 1. The base case with a = 1 is immediate. Suppose that the induction 
assertion holds true for a and let us show that it holds true for a + 1. By Lemma [3 .2\ 
there is a run r' of length strictly less than w weight(r)+l such that r' ~ r <a)W ei g ht(r)+i xa . 
Hence r'-r >ajW eight(r)+i XQ , ~ r and its length is exactly u; weight ( r ) +1 . Now suppose that 
a is a limit ordinal and for every smaller ordinal, the property holds true. Let r 
be a run of length ( X ! weight ( r )+ 1 x a. There exists an increasing sequence (ai)i^ 
with ao = and a = Urn on (see e.g. [Ros82l Theorem 3.36]). For i > 0, let 
a' { be w wcight ( r ) +1 ai + cj wcight M. Observe that a[ - w weight ( r ) +1 ai = w weight M and 
a; wei g ht(r)+i a . <a '. < w weight M +1 a i+1 . For i > 0, let A be w ™s ht (0+i xa! . For every 
i > 0, let r, be the path r^ a r^. +1 y By Lemma 1331 for every j > 0, there is a path r'j 
congruent to rj of length strictly less than (j weight ( r )+ 1 and weight(r') < weight(rj). 
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Let r' be the run ?*[/3 ,aj ) )^o r [/3i,ai) r/ i r [/32.a2) r 2 ■ ■ ■• The path r' is exactly of length 
a; weight(r)+i anc j ft j g congruent to r. 

The proof is by double induction on the weight and on a. 
Base case: weight (r) = 1. 

Let / : [N] 2 — > Q x V(Q) x Q be the function whose domain is made of unordered 
pairs {i,j} of natural numbers (say, i < j) such that 

fiihl}) = ( r ( w x i),Bi im (r [u]Xi ^ xj) ),r{u x j)) 

By Ramsey's Theorem (see e.g. [Ram30, Ros82j), there is an infinite set Y C N 
such that / restricted to [Y] 2 is constant. Hence, there is a value (q*,A,q*) and 
an infinite sequence < iq < i\ < %i < ■ ■ ■ such that for every k > 0, we have 
/({ik^k+i}) = (<l*,A,q*}. Observe that A = Bi im (r) and for every k, we also 
have B Hm (r) C B Wm (r[ wxifc)WXifc+l) ). Since weight (r) = 1, we get that B Hm (r) = 

Let us come back to the proof by induction. The base case with a = 1 is immediate. 
Suppose that the property holds true for a and let us show that it holds true for 
a + 1. By induction hypothesis, there is a path r' congruent to r of length ui 2 x a. 
Since r> WX i is also a path of length uj 2 , r' ■ r>uxi is a path {B Um (r <ulxio ) = A), it 
is congruent to r and its length is precisely (ui 2 x a) + ui 2 . 

Now suppose that a is a limit ordinal and for every smaller ordinal, the property 
holds true. There exists a strictly increasing sequence (oi)igN with ao = and 
a = lim OLi. By the induction hypothesis there is a run rj of length u 2 x (<x,+i — ay) 
congruent to r> WX ij {i">uxij is also of length w 2 ). Then, ro • ri • T2 • • • is congruent 
to r and it is of length w 2 x a. Observe that Bn m (ro ■ r\ • r% ■ ■ ■ ) is precisely A that 
is equal to Bu m (r), as stated above. 

Induction step:: weight (r) > 1 and the property holds for all the paths of weight 

strictly less than weight (r). 

The base case with a = 1 is immediate. 

• Suppose that the property holds true for a and let us show that it holds true for 
a + 1. As in the base case, we define a coloring function / such that we color the 
interval with endpoints at positions of the form Similarly to the 
base case, there is a triple (q*,A,q*) and a sequence < io < i% < 12 < • • • such 
that for every k > 0, f({i k ,i k+1 }) = {q*,A,q*}. If there is /3 < u ^sht(r)+i guch 
that Bu m (r < p) = Bn m (r) then by induction hypothesis, there is r' ~ r such that 
r' is of length o> weight M +1 x a and Bn m (r') = Bn m (r < p). Hence r' ■ r>p is a path, 
f 1 ' r >i3 ~ r and its length is w wei s ht ( r )+ 1 x (a+1). If there is no such an ordinal /3, for 
every limit ordinal /3 G [cj wei s ht ( r ) x (ii-1), oj we ^ ht(r ^ xh), B Um (r) C B lim {r p ) since 
A C B Hm (r </s ). Hence W = weight (r [w ,»^t(r) x ( il _ 1 ) )W w e ightw xil )) < weight(r). By 
the induction hypothesis there is a run r' ~ ' r [ w wcight(r) x( -j 1 _ 1 ' )ja; wcight(r) >< j 1 - ) of length 
oj w+1 x ( w (weight(r-)-W) x a ^ that is of length ^weightCrJ+i x q by associativity of 
multiplication. Hence r <weight ( r ) x (j 1 _ 1 ) • r' ■ r >a)W ei g ht(r-) xil ~ r and it is of length 

w weight(r)+l x ( a + X). 

• Now suppose that a is a limit ordinal and for every smaller ordinal, the property 
holds true. There exists a strictly increasing sequence (aj)j 6 N with ao = and 
a = lim aj. As above, a triple of the form (q*,A,q*) and an w-sequence io < 
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%\ < %% < . . . can be denned. Observe that for every k > 1, for every limit ordinal 

G [ w wei g ht(r) x (4_i) )W weight(r) x B[ . mir) Q Blim (r, (3) since A = B lim {r) and 

A C Bu m (r, (3). Hence the weight of 

'"[o; wei s ht ( T ') x (ifc— i),w we *sk*( r ) x ' noted Wjfe, is less 
or equal to weight(r). By induction hypothesis, for every k > 1, there is a path rp. ~ 
r [ajWcight(r ) x(ifc _ 1)iajW ei ght (, )><ifc) of length u^ +1 x ( w (weight (r)-W fc ) x ( afc+1 _ afc)) that 

is of length w weight ( r - )+1 (afc_|_i — a^). Hence r' = r\r<irj, ... is path, it is congruent 
to r and of length a _ J wei sht(r-)+i x a _ j^. - g WOT f i \ 1 observing that Bn m (r') = A. □ 

Because of the translation from formulae to automata, we can also establish a pumping 
lemma at the level of formulae. 

Lemma 3.5. 

(I): Let A be a simple ordinal automaton with acceptance conditions and a, (3 be countable 
ordinals such that a ~ C ard(B)+2 fi- Then, A has an accepting run of length a iff A 
has an accepting run of length f3. 
(II): Let if) be a formula in LTL(U, S) and a, (3 be countable ordinals such that a ~ui+2 P- 
Then <p has an a-model iff 4> has a (3-model. 

Proof. 

(I): Direct consequence of Lemma l3.2l and Lemma [3.41 since accepting runs can be viewed 
as paths. 

(II): By Lemma 12.31 <f> has an a-model iff A^ has an accepting run r of length a. Since 
the cardinal of the basis of A^ is precisely \4>\, by (I) we get that A^ has an accepting 
run r of length a iff A$ has an accepting run r of length /3. Equivalently, 4> has a 
/3-model. □ 



4. Checking nonemptiness of simple ordinal automata 

In this section, we provide algorithms to check whether a simple ordinal automaton admits 
accepting runs. The first one runs in exponential time. Our optimal algorithm runs in 
polynomial space in the size of the basis (see Section I4.2p . 

4.1. An exponential-time algorithm for checking nonemptiness. Let A be a simple 
ordinal automaton (B ,Q, L, F, T, b~next-,o~Um) ■ We provide below an algorithm to check given 
q,q' £ Q and n G N whether there is path r : a + 1 — > Q such that r(0) = q, r(a) = q' 
and a < uj n . Given an (a + l)-path we write abs(r) to denote the triple (r(0), all(r), r(a)). 
We define a family of relations containing the triples of the form abs(r). Each relation Ri 
below is therefore a subset of Q x V(B) x Q. 

• Rq = {(q, q n q', q') : (q, q') G 5 next }, 

• For i G N, 

m m 

q m +i) ■ 3 qo, ■ ■ ■ ,q m+ i,A , ... ,A m s.t. /\ (qj,Aj,qj +1 ) € Ri} 
j=0 j=0 

• For i G N, Ri+\ is defined from R[ as follows: {q, A, q') G Ri+i iff one of the conditions 
holds true: 

(1.): (q,A,q')eRi, 
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(2.): there exist (q,A',q") G R[ (2.1), (q",Y,q") G R[ and a limit transition (Y,q f ) G 5u m 
(2.2) such that A = A' (~)Y flq'. 
The above numbering will be reused in Figure 

Let us first observe a few facts, whose proofs are by an easy verification. 

(1) Whenever (q, A, q') G Ri, A C q n g'. 

(2) Because ^ C R t+1 for all i, for some N < 2 3xcard ( s ) + 1, R N+1 = R N . The bound 

2 3xcard(B) + j takeg gimply into accoun t that Q C ??(£). 

In the sequel, for n > and for (g, A, q') £ Q x V{B) x Q, we establish the equivalence 
of the propositions below: 

• there is a + 1 < uj n+l and an (a + l)-path r such that abs(r) = {q, A, q'), 
. (q,A,q') ER' n . 

Lemma 4.1. // {q,A,q') G R n , then there exist a < uj n and an (a + l)-path such that 
abs(r) = (q,A,q'}. 

Proof. The proof is by induction on n. For the base n = 0, the proof is by an easy 
verification. In the induction step, suppose that (q,A,q'} G R n +i- First suppose that 
(q, A, q') G R' n , that is there are q , . . . , q m+ i, A , . . . , A m such that f\™ =Q {qj, Aj,q j+1 ) G i?„, 
A = Dj=o A?' 10 = 1 and g m +i = g'. By induction hypothesis, for i G [0, m], there is a path 

ri : oij + 1 — > Q such that abs(rj) = (qt,Ai, qi+i) and Qj < w n . Hence, ro r m is a path 

of the desired form of length strictly less than uj n . 

If (q,A,q'} R' n , then necessarily, by definition of R n +i, there exist (Y,q') G <5/j m , 
(<?, A', g") G R' n and (g", F, g") G R' n such that A = i'nFng'. 

Hence, by definition of R' n and by induction hypothesis there is a path r : a + 1 — ?• Q 
of length strictly less than oj n between q and q" . Similarly, there is a path r' : (3 + 1 — > Q 
of length strictly less than uj n between q" and q". Observe that r" = r ■ (r') u q' is a path of 
length strictly less than w n+1 , Bu m (r") = Y and abs(r") = (q,A,q'}. □ 

Consequently, if (g, A, q') G R' n , then there is a + 1 < w n+1 and an (a + l)-path r such 
that abs(r) = (q,A,q'). A converse result can also be established. 

Lemma 4.2. Let r : a + 1 — > Q be a path such that a < uj n . Then abs(r) G R' n . 

Proof. The proof is by induction on n. The base case n = is immediate. In the in- 
duction step, let r be a path of length a < ui n+1 . If a < lu u , by induction hypothesis 
(r(0), all(r), r(a)) G R' n and therefore (r(0), all(r), r(a)) G R n +\ since R' n C R n+ \. Now sup- 
pose that a = u) n xm+f3 with f3 < uj n and m > 0. In order to show that {r(0), all(r), r(a)) G 
R' n +i it is sufficient to consider the case a = uj n . Indeed, R' n+ i is closed under composi- 
tion, i.e. if (g , A), go) G Ki+i and (q'o, a i,Qi) € R n+ii tnen {qo,A nAi,q[) G 
So, suppose that r is of length uj n + 1. By induction hypothesis, for every < i < i' , 
(r(cj n_1 x i), Aiy , r((jj n ~ l x i')) G i?^ for some A^i. By Ramsey's Theorem, there are 
< io < i\ < . . . such that (r(cj n ~ 1 x i^), Ai k ^ k+1 , r{ui n ~ 1 x ik+ij) is the same for all k > 0. 
Let j = iq and j' = i\. By induction hypothesis, (r(w n_1 x j), Ajj/, r(uj n ~ l x j')) G i?^ since 
the length of '"[t l )"- 1 x3> n - 1 xj 7 ] is strictly less than uj n . Moreover, we have Ajj> = Bii m (r,uj n ). 
So, there exist (r(0),A',q") G R' n {A' = A 0J , q" = r^™" 1 x j)), (g",y,g") e R' n (Y = A j>f ) 
and a limit transition (Y, r(w n )) G <fe m such that A = A' C\Y D r{ui n ). Consequently, 
(r(0),aJl(r),r(a)) <= R' n+1 . □ 
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We provide below a first complexity result. 

Lemma 4.3. The nonemptiness problem for simple ordinal automata with acceptance con- 
ditions can be checked in exponential time in caicd(B). 

Proof. Let A be of the form (B, Q, I, F, F, 5 nex t, 5u m ). A has an accepting run iff either 
(A) there are qo E I, qf E F and AC6 such that {qo, A, qf) E R' n for some n or (B) there 
are qo E /, and a run r from qo such that Bn m (r) E F. (A) deals with accepting runs of 
length some successor ordinal, whereas (B) deals with accepting runs of length some limit 
ordinal. 

In order to check (A), it is sufficient to test for (qo,A,qf) E I X V{B) x F whether 
(qo,A,q f ) E i?card(B)+3 ^ ^card(B)+4- Since card(Q) is in 0(2 card ( B )), computing R caid ( B )+4 
takes card(i?)+4 steps that requires polynomial time in \ A\ and exponential time in card(-B), 
we obtain the desired result. Observe that we can take advantage of the fact that computing 
the transitive closure of a relation and the maximal strongly connected components can be 
done in polynomial time in the size of the relations. 

By Ramsey's theorem, (B) is equivalent to the following condition: there are q E Q, 
AQ B, A' E F and runs r\ and r2 such that abs(?r) = (qo,A,q) and abs(r2) = {q,A',q). 

Hence, in order to check these, it is enough to check whether there are qo E /, q E Q 
and A C B such that {q ,A,q) E R' CSLI d(B)+3' (l,A',q) E -Rcard(B)+3 an ^ A ' e This can 
be done in exponential time as for (A). □ 

As a corollary of Lemma 14.31 satisfiability for LTL(U,S) is in exptime. Moreover, this 
can be improved as shown in the proof of Theorem 15.11 presented in Section [5j 

4.2. A polynomial-space algorithm. We improve below the bound in Lemma 14.31 by 
taking advantage that the recursive depth is linear and only paths of at most exponential 
length need to be computed. 

Theorem 4.4. The nonemptiness problem for simple ordinal automata can be checked in 
polynomial space in card(l?). 

Proof. By Lemma 14.11 and Lemma 14.21 and by the fact that for all n > 0, we have R n C 
-^card(S)+4) we obtain that A has an accepting run iff (A) there are qo E /, qj E F and 
A C B such that (qo,A,qj) E ^ C ard(B)+3 or (B) there are go E /, q E Q and A' C B such 
that {qo, A', q) E -R C ard(B)+4i {Q>A',q) E -R C ard(B)+4 an d A' E F. B denotes the basis of A. 

The function PATH defined in Figure [2] checks recursively whether a triple belongs 
to Rn. Typically, the specification is that there exists an accepting computation for 
PATH(^4, {q, A, q'), N) iff {q,A,q') E Rn for the ordinal automaton A. It takes into ac- 
count that the number of potential triples in Rn is bounded. Observe that the algorithm 
is nondeterministic and any guess that breaks some condition somewhere aborts the com- 
putation. 

In order to check (A), the non-deterministic algorithm guesses qo E /, qf E F and 
A C B (encoded in polynomial space in 0(c&rd(B)) and test whether 

PATH(^4, (q ,A, q f ),c&rd(B) + 4) 

returns true. Condition (B) admits a similar treatment. The non-deterministic algorithm 
PATH defined below works in polynomial space in card(-B) assuming that the last argument 
is polynomial in card(-B) which is the case with card(-B) + 4. 
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PATHG4, (q,A,q'),N) 

• If N = then (if (either A ^ q n q' or (q, q') ^ 5 nex t) then abort else return true); 

• If N > then go non-deterministically to 1. or 2. 

(1.): Guess on-the-fly a sequence 

{q ,A ,qi),(qi,Ai,q 2 ),...,(q m i A m , q m + i ) 

such that 

- m < 2 3xcard ( B ) +1 + 1, 

- for < i < m, PATH(„4, {qi, Ai, qi + i),N — 1) returns true, 
-A = p [j A j 

- q = q , q' = q m+1 ; 

(2.): We guess here two long sequences: 

(2.1) : Guess on-the-fly a sequence 

such that 

- m < 2 3xcard ( s )" 1 " 1 + 1 

- for < i < m, PATH(^4,, (qi, Ai, qi+i), N — 1) returns true, 

- Qo = q; 

(2.2) : Guess a limit transition (Y,q ! ) G 5n m and on-the-fly a sequence 

(^Oj A' Q , q'i), (q[, A[,q' 2 ), . . . , (q' m , A' m ,,q' m , +1 ) 

such that 

- m' < 2 3xcard (- B )+ 1 

- for < i < m', PATH(^, (q[, A\, q' i+1 ),N - 1) returns true, 

- A = (A'n q' ml+1 ) n fl, A' p Y = n, A' p 

- qo = qm+i', 

• Return true. 

Figure 2: Algorithm PATH 

In (1.), guessing on-the-fly a long sequence means that only two consecutive triples are kept 
in memory at any time. We introduce a counter that will guarantee that m < 2 3xcard ( B ) +1 
and it requires only space in 0(card(l?)). Moreover, in order to check A = f"] ■ Aj we 
need two auxiliary variables that bookkeep the Aj computed so far. Similar techniques are 
used in (2.) to guarantee that this non-deterministic algorithm requires only polynomial 
space in C(card(i?) + N) (we only need more variables and steps). It is straightforward to 
show that PATH(^4., {q, A, q'),N) has a computation that returns true (all the guesses were 
correct) iff (q,A,q') £ Rjy. Finally, by using Savitch Theorem [Sav70| . we can conclude 
that nonemptiness can be checked in deterministic polynomial space in card(-B). O 

Observe that the algorithm in the proof of Theorem 14.41 runs in space 0(caid(B) x 
(card(-B) + log (card(Q)) + log (card(<5/j m )) + log (card((5 rae ^))). Indeed, the recursive depth 
is in 0(card(-B)). This is certainly sufficient to get forthcoming results about the complexity 
of LTL(U,S). Nevertheless, the exact complexity characterization of the nonemptiness 
problem is open. It seems unlikely that the problem can be solved in nlogspace. 
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5. Complexity of Satisfiability Problems 

We establish new complexity results for problems related to LTL(U,S) satisfiability which 
follow from the intermediate results we have established so far. 

5.1. Complexity of LTL(U, S). Here is the main result of the paper. 

Theorem 5.1. The satisfiability problem for LTL(U, S) over the class of ordinals is pspace- 
complete. 

Proof By Theorem 11.2( 11). a formula is satisfiable iff it is satisfiable on some model of 
countable length. By Lemma 12.31 given a formula <f> in LTL(U,S), there is an automaton 
As whose accepting runs correspond exactly to models of <f>. In order to check nonemptiness 
of As, we do not build it explicitly (as usual) but we run the algorithm from the proof of 
Theorem 14.41 and we compute the locations, and transition relations of As on demand. 
Hence, we obtain a polynomial space non-deterministic algorithm since the cardinality of 
the basis of As is in 0(|(/>|) and checking whether a subset of B is a location of As or 
{QiQ'} ^ o~next or (Y, q) € Sum can be done in polynomial space in 0(|(/>|). Again by Savitch 
Theorem [Sav70| . we get that the satisfiability problem for LTL(U,S) is in pspace. The 
pspace lower bound can be easily shown inherited from LTL. □ 

Our procedure to show the pspace upper bound is not optimal and it is subject to 
many refinements but it is sufficient for our needs. For instance, it is possible to have as a 
base set for As the subset of sub{4>) made of until or since subformulae and propositional 
variables. Indeed, the implicit presence of other subformulae can be deduced thanks to 
maximal consistency. This refinement possibly decreases the length of the small models. 

Due to Kamp's Theorem [Kam68j , we get the following corollary. 

Corollary 5.2. Let LTL(U, S, Oi, . . . , 0^) be an extension o/LTL(U,S) with k first-order 
definable temporal operators. 

Then the satisfiability problem for the logic LTL(U, S, Oi, . . . , Ok) over the class of or- 
dinals is in pspace. 

Indeed, every formula Oi(pi, ■ ■ ■ ,p ni ) encoded as a DAG can be translated into an equiv- 
alent formula in LTL(U, S) encoded as a DAG over the propositional variables pi, ■ ■ ■ ,p ni - 
Since Oi, . . . , 0^ and their definition in LTL(U, S) are constants of LTL(U, S, Oi, . . . , 0&), 
we obtain a translation in polynomial-time (with our definition for the size of formulae). 

5.2. A family of satisfiability problems. The satisfiability problem for LTL(U,S) asks 
for the existence of a model for a given formula. A natural variant of this problem consists 
in fixing the length of the models in advance as for LTL. The satisfiability problem for 
LTL(U,S) over a-models, noted SAT(a, LTL(U, S)), is defined as follows: 

input:: a formula 4> m LTL(U, S); 

question:: Is <f> satisfiable over an a-model? 
In this subsection we prove that SAT(a, LTL(U, S)) is in pspace for every countable ordinal 
a. First we consider the case of ordinals strictly less than uj w . Let us establish that for every 
a < uj u there is a formula def a in LTL(U,S) with the truth constant T (no propositional 
variable) such that for every /3- model a, we have a, |= def Q iff /3 = a. 
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Lemma 5.3. Given an ordinal < a = uj x aki + • • • ui km ak m < ^ with k\ > . . . > k rn > 
and afo, . . . aj^ 6N\{0}, there is a formula dei a inLTL(U,S) of linear size in Y^ii^i x a fcJ 
suc/i that for any model a, we have a, |= def a i/f <r is o/ length a. 

Proof. We define a family (c^ i )^> such that for all a-models a and /3 < a, we have a, /3 |= ^ 
iff /3 is a multiple of oj % . We set 930 = T and by induction (fi+i = (ft A ->(-i</>jSy3j). Observe 
that \tpi\ is polynomial in i since it is defined as the cardinality of sub((fi). Now let us define 
def a as t{a) defined recursively below: 

• t(i) = -nF+T, i(n) = Xt(n - 1) for n > 1, 

• t(u kl a kl + • • .+ w fcm a fcm ) = -.p fcl U(</? fel A i(w fcl (a fel - 1) + • • • + uj k ™a km )) with h > and 
(flfci > 2 or m > 1), 

• t(w) = G+X _1 T A F+T A G+XT, 

• t(uj kl ) = G + -iv?fci A GF + (fk 1 -x with fci > 1. 

The size of def a is in x a kJ)- D 

We are now in position to state the following result. 

Corollary 5.4. For every a < w u , i/ie problem SAT(a, LTL(U, S)) is in pspace. 

Proof. <j) has a a-model i& tp = (f> A def a is satisfiable over the class of ordinals. Thanks to 
Lemma 15.31 and Theorem 15.11 we obtain the PSPACE upper bound. □ 

Now we consider the case of a countable ordinal a > oj u . Let a' be the unique ordinal 
strictly less than oj u such that a = oj u x 7 + a' for some ordinal 7. Note that for every 
k, truncfc(a) = truncfc(a; fc + a') < uj w . By Lemma 13.5( 11). <j) has an a-model iff <p has a 
a^-model with a\M = trunc|0| +2 (a) = trunc|^| +2 ( w '^' +2 + a ')- Hence, <p has an a-model 
iff A defoj.^i is satisfiable (over the class of countable ordinals). Since the size of def Q|0| is 
polynomial in the size of <j>, we derive from Theorem 15.11 trie following result. 

Corollary 5.5. For every countable a > uj^ , the problem SAT(a, LTL(U, S)) is in PSPACE. 

Corollaries 15.41 [531 and the arguments similar to the arguments in the proof of Corollary 
15.21 imply the result below. 

Theorem 5.6. The satisfiability problem for LTL(Oi, . . . , Ok) restricted to a-models is in 
pspace, for every finite set {Oi, . . . , 0^} of first- order definable temporal operators and for 
every countable ordinal a. 

Observe that a finite implies SAT(a, LTL(0i, . . . , Ok)) is NP-complete, otherwise PSPACE-| 
hardness for SAT(a, LTL(U, S)) follows from PSPACE-completeness of SAT(w, LTL(U, S)). 

5.3. Uniform satisfiability. Biichi (see, e.g., [BS73]) has shown that there is a finite 
amount of data concerning any countable ordinal that determines its monadic theory. 

Definition 5.7 (Code of an ordinal). Let a be a countable ordinal and let m be in [l,w]. 
(1) Write a = uj m a' + £ with £ < oj m (this can be done in a unique way), and let 

f -2 if a' = 



(2) If ( ^= 0, write ( = J2i<n ^ * ' a n-i where at € u for i < n and a n 7^ (this can be 
done in a unique way), and let t m (a) := (a n , . . . , oq). If C = 0, let t m (a) = —3. 
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(3) The m-code of a is the pair (p m (a) , t m (a)) . 

The following is implicit in [BS73]. 

Theorem 5.8 (Code Theorem). There is an algorithm that, given a monadic second-order 
sentence (ft & n d the cj-code of a countable ordinal a, determines whether (a, <) \= (ft. 

Lemma 13.51 can be rephrased as "the {\(ft\ + 2)-code of an ordinal a determines whether 
(ft has a model of length a" . 

Let C = (b, a n , . . . ao) be an m-code. Its size is defined as n + ao + a\ + ■ ■ ■ + a n . It 
is clear that for mi < m<i the m2-code of an ordinal determines its mi-code and there 
is a linear-time algorithm, that given 7712-code of an ordinal and m\ < ni2 computes the 
mi-code of the ordinal. 

The arguments used in the proof of Corollary 15.51 show the following theorem. 

Theorem 5.9 (Uniform Satisfiability). 

(I): There is a polynomial- space algorithm that, given an LTL(U,S) formula (ft and the 

w-code of a countable ordinal a, determines whether (ft has an a-model. 
(II): There is a polynomial- space algorithm that, given an LTL(U,S) formula (ft and the 
(\(ft\ + 2)-code of a countable ordinal a, determines whether (ft has an a-model. 

6. Related Work 

In this section, we compare our results with those from the literature related to satisfiability. 
It is worth noting that an axiomatization of LTL(U, S) over ordinals can be found in |Ven93| . 
Nevertheless, the concern in this above-mentioned paper is quite different from ours. 

6.1. Comparison with Rohde's thesis. In [Roh97], it is shown that an uniform satisfia- 
bility problem for temporal logic with until (and without since) can be solved in exponential 
time (flows of time are countable ordinals). The inputs of this problem are a formula in 
LTL(U) and the representation of a countable ordinal. The satisfiability problem is also 
shown in exptime. In order to obtain this upper bound, formulae are shown equivalent 
to alternating automata and a reduction from alternating automata into a specific subclass 
of non-deterministic automata is given. Finally, a procedure for testing nonemptiness is 
provided. Here are the similarities between [Roh97j and our results. 

(1) We also follow an automata-based approach and the class of non-deterministic automata 
in [Roh97] and ours have a structured set of locations and limit transitions use elements 
that are true from some position. 

(2) Existence of a-paths in the automata depends on some truncation of a. 

(3) The logical decision problems can be solved in exponential time. 

However, our work improves some results from [Roh97 . 

(1) Our temporal logic includes the until and since operators (instead of until only) and it 
is therefore as expressive as first-order logic. 

(2) We establish a tight pspace upper bound (instead of exptime) thanks to the intro- 
duction of simple ordinal automata. 

(3) Our proofs are shorter and more transparent (instead of the lengthy developments found 
in [Roh97p . 
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Consequently, the developments from [Roh97j and ours follow the same approach with 
different definitions for automata, different intermediate lemmas and distinct final com- 
plexity bounds. On the other hand, the structure of the whole proof to obtain the main 
complexity bounds is similar. 



6.2. LTL over other classes of linear orderings. Even though the results for linear- 
time temporal logics from |Rey03[ |ReylOb| involve distinct models, our automata-based 
approach has similarities with these works that uses a different proof method, namely 
mosaics. Indeed, equivalence classes of the relation ~ between runs of length a successor 
ordinal roughly correspond to mosaics from |Rey03|. We recall the main results below. 

Theorem 6.1. 

(I): |ReylOb| The satisfiability problem for the temporal logic with until and since over 

the reals is PSP ACE- complete. 
(II): |Rey03| The satisfiability problem for LTL(U) over the class of all linear orders is 
PSPACE-complete. 



The proofs in [Rey03 ReylOb| are much more involved than our proofs since the orders are 



more complex than the class of ordinals. Moreover, a recent work [Cri09| has established 
that LTL(U,S) over the class of linear orderings has an elementary complexity by using 
transducers as done in [Mic84] for standard LTL. More precisely, satisfiability for LTL(U, S) 
augmented with future and past Stavi operators is in 2expspace [Cri09]. Nevertheless, 
complexity of LTL(U, S) over the class of linear orderings has been recently solved: for any 
temporal logic with a finite set of modalities definable in the existential fragment of second- 
order logic has a PSPACE satisfiability problem over the class of linear orderings [RablOa, 
IRablObj (see also |ReylOa| ). Moreover, observe that LTL(U,S) over the reals has been 
recently shown in pspace in |ReylOa| , which allows us to obtain in a different way that 
LTL(U,S) over the countable ordinals is in PSPACE (see the full arguments in [RablOa, 
Section 13]). 



6.3. Quantitative temporal operators. In this section, we show that the main re- 
sults from [DN07] are subsumed by the current paper. We also solve an open problem 
from |Cac06t IDN07] . For every fixed countable ordinal a < u, let us introduce the logic 
LTL(O a ) where the set of temporal operators O a is defined as follows: {X^ : (3 < w a }U{U^ : 
P < uj a }. The models of LTL(C Q ) as those of LTL(U, S) and the formulae of LTL(O a ) are 
precisely defined by: 

(/>::= p | -~4 | &A<fe I I <h.U P <h- 

The satisfaction relation is inductively defined below where a is a model for LTL(C Q ) (we 
omit the obvious clauses): 

• a , /3 \= XP'(f> iff P + P' is a position of a and a, P + P' (= 4>, 

• a, P \= 4>\ IP (f>2 iff there is 7 € (0, P') such that p + 7 is a position of a, we have 
a, P + 7 |= 4>2 and for every 7' G (0, 7), we have a, P + 7' \= 4>i- 

The satisfiability problem for LTL(O q ) consists in determining, given a formula (f>, whether 
there is a model a such that a, \= <j>. The main results of |Cac06t IDN07| are the following: 
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(1) For every k £ N \ {0}, the satisfiability problem for LTL(O^) restricted to models 
of length uj k is PSPACE-complete when the natural numbers occurring in formulae are 
encoded in unary. With binary representation, it becomes EXPSPACE-hard (mainly 
because a temporal operator X 2 is helpful to specify concisely the cell contents of 
exponential-space Turing machines). 

(2) LTL(O w ) restricted to models of length oj u is decidable. 

Observe that LTL(Ofc) cannot express the temporal operator U over the class of countable 
ordinals but it can do it on models of length oj k . Hence, each logic LTL(Ofc) is less expressive 
than LTL(U,S). 

Moreover, it is easy to show that for every a < u, the logic LTL(Oq,) is expressively 
equivalent (over the class of countable ordinals) to its sublogic over the following set 0' a of 
temporal operators: 

O f a = {X ui :J <w a ,iEN}U{U w ' : J* < u a ,p < u}. 

This set is finite when a is finite. Moreover, there is a linear-time (and logarithmic space) 
meaning preserving translation from LTL(Oq,) into LTL(O^). 

Let us translate <p in LTL(O^) into a formula t{4>) in LTL(U,S) homomorphically for 
the Boolean operators and such that the propositional variables remain unchanged. Here 
are the remaining clauses of translation: 

. £(</>! U"V 2 ) = (-.tpi A t(^ 1 ))U(-. Vi A t(V 2 )), t(^lU w > 2 ) = i(^)Utfofe), 

The formula ipi is defined in the proof of Lemma 15.31 The following result is easy to show. 
Lemma 6.2. 

(I): Let cb be in LTL(C^, \ {U"^}). t(<p) is equivalent to <p over the class of countable 

ordinals, i.e. for all a-models a and (3 < a, we have a, {3 \= <p iff a, f3 \= t(4>). 
(II): Let (p be in LTL(0£,). For all uj^ -models a and (3 < uj u , we have a, /3 \= <f> iff 
a, (3 \= t((j)). Moreover, \t((j))\ is linear in \<j)\. 

(I) is essentially based on the properties of formulae ipi and on the exclusion of U"' . (II) 
simply takes advantage of the fact that for the w^-models, U and U 1 ^ are obviously equiv- 
alent. 

We obtain alternative proofs for known results and we get new results. 

Theorem 6.3. For every k G N \ {0}, 

(I): the satisfiability problem for LTL(Ofc) over uj k -models is in pspace with unary en- 
coding of natural numbers, 
(II): the satisfiability problem for LTL(C^,) restricted to uj k '-models is PSPACE-complete, 
(III): for every countable infinite ordinal a, the satisfiability problem for LTL(0' k ) restricted 
to a-models is PSPACE-complete. 

(Ill) is an instance of Theorem 15.61 (II) is an instance of (III) (with unary encoding of 
natural numbers) . (I) can be shown by observing that there is a logarithmic space meaning 
preserving translation from LTL(O^) to LTL(C^). (I) is the main result of |DN07j with the 
unary encoding of natural numbers occurring in ordinal expressions. Finally, the corollary 
below improves the non-elementary bounds obtained in ( 'acOOj IDN07) for LTL(O w ) by 
reducing this temporal logic to the monadic second order logics, and then to Buchi ordinal 
automata. 
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Corollary 6.4. Satisfiability for LTL(C w ) over the class of cj w -models is psp ace- complete 
with unary encoding of natural numbers in formulae. 

7. Conclusion 

In the paper, we have shown that the linear-time temporal logic with until and since over the 
class of ordinals, namely LTL(U,S) has a PSPACE-complete satisfiability problem. Due to 
Kamp's Theorem [Kam68| . we know that LTL(U, S) is a fundamental temporal logic since it 
is as expressive as first-order logic over the class of ordinals. In order to establish this tight 
complexity characterization, we have introduced the class of simple ordinal automata. This 
class of automata is more structured than usual ordinal automata and the sets of locations 
have some structural properties, typically it is a subset of the powerset of some set (herein 
called the basis). As a consequence, we are also able to improve some results from [Roh97, 
IDN07] , For instance the uniform satisfiability problem is PSPACE-complete and we obtain 
alternative proofs for results in [DN07| . Recent results about the polynomial space upper 
bound for LTL over various classes of linear orderings can be found in [RablOa| IRablObj by 
using the so-called composition technique and the automata-based technique used in this 
paper. 
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